Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: UPHb4z+kaasOICnH6rCIuZPQ3l72TSL2CFBnHc8tDhY=
Subject key identifier: 66:EE:17:98:72:45:DA:F8:EA:D8:FC:6F:CB:17:97:C2:49:45:B4:06
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 0194BCA9E7E4973C7F96890924FBD6D86E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 13C0
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: 7bYkSSJ4PHUTTCmH0tMCRxZWg+mNUYIwkL1LY6BDnGs=)
2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e7:e4:97:3c:7f:96:89:09:24:fb:d6:d8:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=66ee17987245daf8ead8fc6fcb1797c24945b406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:85:6c:08:95:93:be:89:4a:7f:0c:48:e7:
d5:17:6d:c6:33:e5:63:12:7b:01:5b:34:83:4a:66:
3c:e1:b2:cc:a3:19:8f:0f:ff:2e:15:95:fa:29:0d:
14:4b:41:98:5b:fd:b6:4a:14:1c:19:21:bd:44:d5:
36:dc:9a:91:7e:f7:59:c1:a7:cc:0b:12:a1:9b:4d:
f5:a0:e3:0b:61:dc:fd:43:11:90:5f:75:96:ba:a0:
57:5d:a5:a3:5f:65:0b:36:e4:87:9b:3d:a5:f1:a6:
98:3f:ac:40:98:f6:61:4f:54:52:cd:f9:e0:c3:4e:
9e:fb:5f:15:4f:ce:07:8e:1a:24:b9:0c:bc:ef:35:
9e:57:ae:9c:99:11:5c:46:13:5f:4f:a6:1b:d7:92:
79:59:ca:ed:d5:79:23:ad:8f:90:3a:ad:93:b5:42:
15:49:43:5a:eb:67:c3:80:1c:bf:1c:0d:98:78:91:
83:fb:22:7f:f2:6c:96:75:c9:dc:13:46:96:17:de:
bb:5c:b3:b2:21:76:40:9f:2a:a1:22:ba:f2:9a:8e:
f4:ea:51:28:66:c3:fa:3d:e9:e4:1f:26:ac:83:c6:
0e:f4:9a:43:81:f8:3c:82:a0:96:b0:98:d6:cd:97:
56:44:9a:1f:fd:8d:9f:a5:60:ab:01:81:c4:ea:32:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EE:17:98:72:45:DA:F8:EA:D8:FC:6F:CB:17:97:C2:49:45:B4:06
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d9:f3:85:4f:47:72:bb:72:4b:7d:ab:6e:4d:44:ba:5e:df:
7f:fe:b0:c3:8d:1d:95:6e:ef:28:ee:8d:31:b9:ef:ed:e8:cc:
d4:12:94:8c:4a:c4:7a:09:03:72:7e:24:6d:f2:57:5a:d3:b5:
67:33:e9:15:51:71:59:22:21:9b:6a:06:af:6a:b0:90:13:34:
62:04:f2:d5:4f:64:a8:fd:02:1f:de:ae:6f:50:4f:c3:22:06:
31:ab:54:d8:19:6f:55:b3:72:91:01:c0:1b:27:8d:b7:5e:98:
db:09:45:48:ba:0d:71:58:f6:6d:0a:9e:5a:68:50:7e:1f:9c:
d3:d9:5f:35:0a:f8:5c:41:4b:1c:ac:ff:d2:b8:4f:b4:1a:3b:
e5:e7:6a:54:88:74:0f:cc:1b:b6:f3:d3:72:2a:ea:08:68:5a:
3e:94:7d:7f:41:e9:40:d3:fd:ab:7d:8f:26:38:97:b6:d5:a3:
74:12:92:7f:20:fa:72:26:5e:8c:09:1e:26:5b:11:a4:48:2c:
e8:fb:89:20:1d:d9:90:57:bb:2e:7b:19:81:8f:e8:f0:0b:5b:
f4:29:e1:d8:c5:d6:dd:7e:be:a8:94:40:3e:3d:30:d5:fc:95:
a5:97:c6:aa:c0:0f:f9:8c:94:59:c1:90:78:14:24:ab:09:9b:
f4:98:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:52:36 2025 by rpki-client